stitch-react-native-components
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its processing of external HTML content.
- Ingestion points: Content is downloaded from a tool-provided URL into
temp/source.htmlas described in Step 1 ofSKILL.md. - Boundary markers: Absent. The skill lacks instructions to delimit the external content or to warn the agent to ignore potential instructions embedded within the source HTML.
- Capability inventory: The skill allows the agent to use
Bash,Read, andWritetools, which could be misused if malicious instructions are processed from the source file. - Sanitization: Absent. No input validation or filtering is performed on the downloaded HTML content before it is processed for component generation.
- [EXTERNAL_DOWNLOADS]: The skill performs external network requests using a shell script to fetch design files.
- Evidence:
bash scripts/fetch-stitch.sh "[htmlCode.downloadUrl]" "temp/source.html"inSKILL.mdinvokescurlto fetch remote data.
Audit Metadata